Privacy Policy

Account information you give us: your name, email address, the name of your firm or company, and the role you hold in it. If you set up two-factor authentication we store the secret needed to verify your codes, not your codes.

Financial data from your accounting system, once you connect a company. June connects to QuickBooks Online and to Xero. From QuickBooks: Profit and Loss, Balance Sheet and Cash Flow reports, accounts receivable and accounts payable aging, and a general ledger transaction list. From Xero: Profit and Loss, Balance Sheet, aged receivables and aged payables, and the journals list that stands in for the general ledger. We store the output of those reports so the product does not have to re-query your accounting system on every page load. These reports can include the names of your employees, customers and vendors, and the amounts paid to them.

Files you upload, such as a CSV of your accounts or other documents you add to your workspace.

Company profile details you enter about your business in Finance for Founders.

Messages you send to the AI agents.

Ordinary technical records that come with running a web application, such as request logs and error reports.

How visitors use our website, and how our ads perform. The section on website tracking below explains what we record and when we ask first.

How visitors use our website. On this website, and on the sign-in and plan pages of the product, we use FullStory to record clicks, scrolling and the pages visited, so we can see where people get stuck. What you type into forms is masked and passwords are never recorded. We never record inside the product, where your financial data is shown.

How our ads perform. On this website we use Google Analytics and the Meta pixel to measure our ads and to show our ads to people who have visited the site. We never use them inside the product.

When this website asks first. On our French pages, FullStory, Google Analytics and the Meta pixel load only after you click Accept. The same applies on every page of this website if we place you in Quebec, the European Union, the European Economic Area or the United Kingdom. It also applies when we can't tell where you are. Reject is one click, the same as Accept. For other visitors these tools load with the page.

To decide whether to ask first, this website reads the country and region that our host, Vercel, matches to your IP address. We keep only the result, ask first or not, in a cookie that expires after an hour. Your location itself is not stored.

The Privacy choices link at the bottom of every page of this website lets anyone turn these tools off, or change an earlier answer.

We never see or store your QuickBooks or Xero password. The connection is made through the provider's own OAuth flow, which hands us a token and nothing else.

We do not collect payment card numbers, bank account numbers, or government identification through the product. When you pay for a subscription, your card details go to Stripe and never reach us.

We do not buy personal information from data brokers, and we do not enrich your account with information bought from anyone else.

To operate the product: to show you your reports, calculate metrics and forecasts, and let the people at your firm, or the people you invite, work on the same files.

To run the AI agents and other AI features when you use them, as described below.

To charge for your subscription, through Stripe.

To protect the service from abuse, for example by limiting how many requests can be made in a short time.

To contact you about your account, including onboarding reminders and service notices.

To find and fix problems. Engineers investigating a fault may need to look at the data involved in it.

We do not sell your data, and we do not rent or share it for anyone else's advertising.

We do not use your clients' financial data to train machine learning models for other customers.

We do not modify anything in your QuickBooks company or your Xero organisation. June reads from your accounting system and never writes to it.

The application runs on Vercel in the US East region, and the database is Postgres hosted by Supabase in the US West region (Oregon). Both are in the United States.

Personal information we hold is stored and processed in the United States. While it is there, it may be accessible to US courts, law enforcement and national security authorities under US law.

If your firm needs Canadian data residency, contact us before connecting a client so we can tell you honestly whether we can meet that requirement today.

QuickBooks and Xero access tokens are encrypted with AES-256-GCM before they reach the database, using a key held outside it. Tokens are never written to logs.

We keep the list of third parties short, and each one is here because the product cannot run without it:

Supabase, Vercel, Resend and Anthropic are not permitted to use your data for their own purposes. Intuit and Xero hold your accounting data under your own agreement with them. Stripe handles payments under its own terms and privacy policy.

Three more see how visitors use our website: FullStory, which records visits, and Google and Meta, which measure our ads and show them to people who visited. FullStory also records the product's sign-in and plan pages. None of them sees your financial data. Privacy choices, in the website's footer, turns them off on the website.

Finance for Founders includes AI agents: Franco, Rocco, Vicky and June. They are on for every founder workspace. When you use them, the figures, forecast, uploaded documents and messages they need are sent to Anthropic to produce the answer, unless the workspace uses its own key as described below. This can include personal information that appears in your financial data. Anthropic does not use them to train its models.

Some agent features look up public information on the web.

In Settings, a founder can add their own API key for an AI provider: Anthropic, OpenAI, Google Gemini or xAI Grok. When they do, AI requests from that workspace go to that provider under the founder's own agreement with it.

In accounting firm workspaces, AI features stay off unless the firm turns them on. If your firm would rather no client data ever reached a model, leave them off. Nothing else in June depends on them.

Client data belongs to the firm, not to whoever connected it. Everyone at your firm with the right role can see the clients your firm has connected, and a report synced by one person is visible to the rest of the team without syncing again.

Separation between firms is enforced in the database itself, not only in the application. One firm cannot read another firm's data even if a bug in our code tried to allow it.

Inside a firm, roles decide who can do what. Removing or restoring a client requires an admin or a manager.

Disconnecting a client is reversible. The record is kept for 90 days so that work built on it, such as forecasts and saved metrics, is not stranded, and so an accidental removal is a one-click fix.

Nothing is deleted automatically after that window. Records past it are surfaced internally and removed deliberately.

If you close your account and want everything erased, write to us and we will delete it.

Canadian privacy law gives you the right to ask what personal information we hold about you, to have it corrected if it is wrong, and to have it deleted. Write to us at clients@juneanalytics.com and we will answer.

If you are unhappy with how we have handled a request, you can raise it with the Office of the Privacy Commissioner of Canada. If you are in Quebec, you can also file a complaint with the Commission d'accès à l'information du Québec.

Our Chief Executive Officer is the person in charge of the protection of personal information at June Analytics. To reach the CEO about privacy, write to clients@juneanalytics.com.

If your data is involved in a breach we will tell you, and the relevant regulator, as required by law. We will tell you what happened rather than the smallest thing we can get away with saying.

If we change this policy in a way that materially affects you, we will let you know rather than quietly updating the date at the top.

Questions about this policy, or a request about your data, can go to clients@juneanalytics.com. We answer privacy questions personally.